x.org xserver vulnerabilities and exploits

(subscribe to this query)

3.6

CVSSv2

The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and previous versions allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization...

X X.org-xserver X X.org-xserver 1.7.7 X X.org-xserver 1.7.6.902 X X.org-xserver 1.7

9.3

CVSSv2

Multiple integer overflows in X.Org Xserver prior to 1.4.1 allow context-dependent malicious users to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or ...

X.org Xserver X.org Evi X.org Mit-shm

5

CVSSv2

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver prior to 1.4.1 allows context-dependent malicious users to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.

X.org Xserver X.org Tog-cup

5

CVSSv2

X.Org Xserver prior to 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.

X.org Xserver

1 EDB exploit

9.3

CVSSv2

Array index error in the XFree86-Misc extension in X.Org Xserver prior to 1.4.1 allows context-dependent malicious users to execute arbitrary code via a PassMessage request containing a large array index.

Xfree86 Project Xfree86-misc X.org Xserver

5.5

CVSSv2

The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and previous versions, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps fu...

X.org X Window System 7.1 X.org X Window System 7.2 X.org X Window System 7.0 X.org Xserver

1 EDB exploit

7.5

CVSSv2

Buffer overflow in (1) X.Org Xserver prior to 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent malicious users to execute arbitrary code via a PCF font with a large difference between the last col and first col va...

Sun Solaris Libfont Sun Solaris Libxfont X.org Xserver

2.1

CVSSv2

Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows malicious users to cause a denial of service (crash), as demonstrated by the (1) XRenderCompositeTriStrip and (2) XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, whic...

X.org X11r6 6.9 X.org X11r6 6.8 X.org X11r6 6.8.1 X.org X11r6 6.7.0

6.5

CVSSv2

Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) ProcPu...

X.org X11 1.0 X.org Xorg-server

3.6

CVSSv2

In the pcfGetProperties function in bitmap/pcfread.c in libXfont up to and including 1.5.2 and 2.x prior to 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash o...

X.org Libxfont 2.0.0 X.org Libxfont 2.0.1 X.org Libxfont

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook